Reference

Your Account, Your Data, Your Transparency

When you open an account with m1.totojitu, you own your funds and your information.

Account ownership verifiedWithdrawal verification processData protection explainedDirect support contact channels
m1.totojitu Your Account, Your Data, Your Transparency
REACH OUR TEAM

Contact Us About Your Account or Legal Questions

We answer legal and account questions through multiple channels during your local business hours.

In-Site Support Chat Open the help icon in your account lobby. Our team responds Monday–Friday 08:00–22:00 WIB.
Email Legal Desk Send account or data requests to [email protected].
WhatsApp Support Reach our team via WhatsApp for urgent account holds or withdrawal blocks.
YOUR SECURITY FOUNDATION

How We Protect Your Data and Account Access

Your account password is hashed with AES-256 encryption and never stored in plain text. When you log in, we verify your device fingerprint against your registration device — if you switch phones…

Password Encryption

Your password is hashed with AES-256. We never see or store your plain-text password. Each login attempt is logged.

Device Verification

First login from a new device triggers email verification. This blocks account takeover if your password is compromised elsewhere.

Payment Tokenisation

DANA, OVO, GoPay and QRIS details are tokenised by our payment partner. We store only a reference ID, never your card or wallet number.

Data Retention Policy

Transaction records, account profiles and KYC documents are held for five years, then purged unless law requires longer retention.

Data Export Right

Request a copy of all data tied to your account — login history, transactions, profile, documents. Delivered within 5 business days.

Account Closure Process

Email [email protected] to close your account. We verify your identity, process pending withdrawals, then archive your data per policy.

Questions About Your Rights and Our Practices

Below are the legal and account questions we hear most often from players in Medan and across Indonesia. Each answer covers your actual rights, how we verify withdrawals, and how to request changes to your account or data.

Your funds are held in a segregated operator account and remain yours. If we cease operations, payment holders are required to return all customer funds to the original deposit method or your registered bank account within 30 days.

Yes. Email [email protected] with your account ID and registered email. We send a complete export — login history, transactions, profile, verification documents — within five business days, at no cost.

Verification takes 24–48 hours after you submit. We cross-check your account holder ID against your destination payment method. Once approved, the withdrawal reaches DANA, OVO, GoPay or QRIS within one minute.

Contact our support team immediately via in-site chat or WhatsApp. We freeze the account, review login history, and verify your device fingerprint. If unauthorised access is confirmed, we reverse fraudulent transactions and reset your password.

No. Your data is shared only with payment processors (DANA, OVO, GoPay, QRIS) for deposit and withdrawal processing, and with our legal compliance partner where law requires. We do not sell email, phone or game history to marketers or brokers.

Yes. Log in, open Account Settings, and update your registered phone number, email or payment method. ID documents can be updated by emailing [email protected] with a new scan and your account ID.

Session cookies remember your login, language and device type while you play. We do not use tracking cookies for marketing. You can clear cookies anytime in your browser settings without losing your account access or funds.